Prevent <script> execution after use html() function

Question

I have a widget that replace some text contents to my clients in a particular section. So to achieve it I need to use html() method that replace all with the new content, but after this, If my client has <script> ... </script> these are executed again!

is there any way to prevent the execution of these scripts?

I would apreciate any help! Thanks

It's hard to answer your question without seeing the code. But it sounds like you're reusing elements that have already been used. If so, just remove the script tags before passing that into html again. — T.J. Crowder
– T.J. Crowder, Commented Jan 26, 2017 at 14:23
I know it's difficult without code, If I delete those scripts, do you think the client will have any problems? — Leo Gasparrini
– Leo Gasparrini, Commented Jan 26, 2017 at 14:42
Not if they've already been run once. Deleting a script element has no effect on the code it introduced into the environment (unlike deleting a stylesheet). — T.J. Crowder
– T.J. Crowder, Commented Jan 26, 2017 at 14:44

Leo Gasparrini · Accepted Answer · 2017-01-27 02:31:07Z

1

As @T.J. Crowder said... removing the scripts was the better solution. thanks man =)

answered Jan 27, 2017 at 2:31

Leo Gasparrini

1691 silver badge12 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

sdc · Accepted Answer · 2017-01-27 02:49:13Z

0

You can load your client's code into an <iframe> and use the sandbox attribute to prevent the client's js execution. The <iframe> element provides security against XSS.

answered Jan 27, 2017 at 2:49

sdc

3,1111 gold badge32 silver badges44 bronze badges

Collectives™ on Stack Overflow

Prevent <script> execution after use html() function

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related